Privacy Policy

Privacy Policy

1. Data controller

The controller of the personal data collected on www.boardfy.com is:

  • Boardfy Pricing S.L., with tax ID (CIF) B27831536
  • Address: Avenida de Madrid 129 Bajo, 36214 Vigo (Pontevedra), Spain
  • Email: info@boardfy.com

This policy explains what data we process, for what purposes, for how long and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights.

2. What data we process

  • Website forms: your email address and, depending on the form, your name, telephone number, your online shop’s web address, type of company, e-commerce platform and the message you write to us.
  • Emails you send us: the data you include in them.
  • Browsing: the data collected by cookies, only those you have accepted. Details are set out in the cookies policy.
  • Technical data: your IP address and browser data, to protect the forms against spam.
  • Customers: if you subscribe to Boardfy, your account and billing data.

3. Why we process them and on what legal basis

  • To deal with your request for a demo, contact or collaboration, and for sales follow-up. Legal basis: taking pre-contractual steps at your request and our legitimate interest in responding to those who contact us.
  • To provide the contracted service and manage our relationship with customers. Legal basis: the contract.
  • To comply with tax and accounting obligations. Legal basis: legal obligation.
  • To measure use of the website, show you personalised advertising (remarketing) and measure the results of our advertisements. Legal basis: your consent given in the cookie notice.
  • To protect the forms against automated spam submissions. Legal basis: our legitimate interest in the security of the website.

The data marked as mandatory in each form are necessary to deal with the request; without them we will not be able to do so.

4. How long we keep them

  • Requests received through the forms or by email: for as long as necessary to deal with them and for sales follow-up and, if you do not become a customer, for a maximum of two years from the last contact.
  • Customers: for the duration of the contract and, thereafter, for the periods required by law to address any potential liabilities.
  • Cookies: the periods indicated in the cookies policy.

5. Who the data are disclosed to

We do not sell your data or disclose it to third parties, except where required by law or where you consent to it (advertising cookies). To provide the service, we work with the following providers, which process the data on behalf of Boardfy and only in accordance with our instructions:

  • Clouding.io (Spain): website hosting.
  • Google (Google Workspace): email, where form submissions are received.
  • Resend (United States): sending of the emails generated by the website.
  • Cloudflare (United States): protection of the forms against spam.
  • Google (Google Analytics) and Microsoft (Clarity): measuring use of the website, only if you accept statistics cookies.

In addition, if you accept advertising cookies, Google, Microsoft and Meta receive browsing data and also process it as controllers, for their own purposes and in accordance with their own privacy policies.

6. International transfers

Some of these providers are located in the United States or may process data there. In such cases, the transfer is based on the EU-U.S. Data Privacy Framework, where the provider has signed up to it, or on the standard contractual clauses approved by the European Commission.

7. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given. To do so, write to info@boardfy.com or to the postal address in section 1, stating which right you wish to exercise. If we have doubts about your identity, we may ask you for a document proving it.

If you consider that we have not properly dealt with your request, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).

Right to object: where we process your data on the basis of our legitimate interest, you may object at any time on grounds relating to your particular situation (Article 21 GDPR).

8. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

9. Changes to this policy

We may update this policy when the way in which we process data or the applicable legislation changes. The version in force is always the one published on this page.

Privacy Policy and Google API Data Use — Boardfy

At Boardfy we respect your privacy and are committed to protecting the personal and account data we access. This policy describes how we collect, use, store and protect the information obtained through our integration with Google API services (Google Merchant Center / Google Shopping).

1. Data we collect through the Google API
When you link your Google Merchant Center account to our Boardfy application, we request access through the scope https://www.googleapis.com/auth/content. Through this API, we collect and process only the data necessary to provide our catalogue management and optimisation services:

– Merchant Center account and sub-account information.
– Product catalogue (product input data, prices, inventory, publication status and API quotas).
– Data sources (datasources) associated with your products.

2. Use of the information
The data obtained through the Google APIs is used exclusively to:

– View, update, synchronise and delete product data in your Google Merchant Center account at the user’s request.
– Manage the data sources and inventories configured within the Boardfy platform.
– Provide status metrics and integration diagnostics for your products.

We do not use the data obtained through the Google APIs to display advertising, to market information to third parties, or to train general artificial intelligence or language models.

3. Google Limited Use Policy
Boardfy’s use and transfer to any other app of information received through Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data sharing and transfer
Boardfy does not sell, rent or share with third parties the data obtained through the Google APIs, except in the following cases:

– Where strictly necessary for service providers that help us operate our infrastructure (who are bound to maintain confidentiality).
– Where required by law or by valid legal process.

5. Data storage and retention
The data obtained through Google Merchant Center is stored securely using encryption mechanisms and strict access controls. We retain this data only for as long as the user’s account remains active on Boardfy, or as necessary to provide the service.

6. Revoking access and deleting data
The user may revoke Boardfy’s access to their Google account at any time through:

– The linked accounts section of the Boardfy platform.
– Their Google account security page at: https://myaccount.google.com/permissions.

Upon revoking access or requesting termination of the service, we will delete the OAuth access tokens and the stored data associated with the Google API within no more than 30 days, unless there is a legal obligation to retain it.

7. Contact

If you have any questions or queries about our privacy policy or the processing of your Google data, you can contact us at:

Email: info@boardfy.com
Tickets at https://app.boardfy.com